Google and Amazon’s move to block domain fronting will hurt activists

Google and Amazon have blocked “domain fronting,” a method that allows developers to mask their traffic online and get around state-level internet blocks.

Following Google App Engine’s move last month, Amazon Web Services has alsoannounced it would discontinue the service and introduce “enhanced protections” to stop applications routing traffic through its cloud platform. Amazon said the termination was about removing a “malware” while Google noted domain fronting had “never been a supported feature.”

Domain fronting is especially critical in countries where governments hold a monopoly over the provision of mobile and internet services, and users cannot access certain sites without disguising their operations by using major cloud providers as a proxy. By virtue of using domain fronting as a technique, governments cannot shut down targeted services without blocking access to the whole suite of Google products including the search engine—a move that would draw more attention than if authorities blocked a specific site.

Peter Micek, the general counsel at digital advocacy Access Now, says they have found approximately a dozen human rights-enabling technologies which rely, in full or in part, on domain fronting that will now be affected. These programs and services include Signal, Lantern, Tor, obfs4 or the obfourscator, ScrambleSuit, meek, and Collateral Freedom.

It’s a particular problem across Africa where some of these anti-censorship tools have been crucial in helping users bypass government-mandated internet shutdowns. Over the last two years, at least a dozen African nations have blocked accessto the internet and social media during politically sensitive or election times—a costly undertaking that heavily impacts businesses and economies. As such, users have used VPNs to skirt blockages in nations including The Gambia,Togo, Cameroon, Uganda, and Ethiopia.

While it’s not clear why the tech giants decided to take this move now, experts say there’s a security concern in allowing domain fronting given the allegations that a Russian state-sponsored group used the loophole in cyber-attacks. Micek also says US-based companies “feel pressure” from their government “lest they fall afoul of US economic and political sanctions,” especially amid concerns of how the Russian government conducted a sophisticated campaign to influence the 2016 US elections.

For now, the termination has left anti-censorship services scurrying to find alternatives. And as the Signal team recently noted, the range of potential solutions has suddenly become “severely limited.”

About the Author:

Abdi Latif Dahir is a reporter with Quartz Africa. He holds a master’s of arts degree in political journalism from Columbia University. He speaks Somali, Arabic, and Swahili.

About The Author

Globe Afrique’s News Desk coordinates and analyses news stories from around the world as well as the gathering or distribution of news.
Globe Afrique, a US-based institution, is Africa’s leading investigative media entity. The institution’s researchers, analysts, reporters, and contributors deeply investigate and report on a single topic of interest, such as serious crimes, political corruption, or corporate wrongdoing. The institution, which sometimes spends weeks or months researching and preparing investigative reports, also researches into social and legal issues. Have a news tip, write to globeafriquellc@gmail.com